English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Zendy Plus

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Zendy Tools

Zendy Open

Ethereum Virtual Machine (EVM) is the run-time environment for smartcontracts and its vulnerabilities may lead to serious problems to the Ethereumecology. With lots of techniques being developed for the validation of smartcontracts, the security problems of EVM have not been well-studied. In thispaper, we propose EVMFuzz, aiming to detect vulnerabilities of EVMs withdifferential fuzz testing. The core idea of EVMFuzz is to continuously generateseed contracts for different EVMs' execution, so as to find as manyinconsistencies among execution results as possible, eventually discovervulnerabilities with output cross-referencing. First, we present the evaluationmetric for the internal inconsistency indicator, such as the opcode sequenceexecuted and gas used. Then, we construct seed contracts via a set ofpredefined mutators and employ dynamic priority scheduling algorithm to guideseed contracts selection and maximize the inconsistency. Finally, we leveragedifferent EVMs as crossreferencing oracles to avoid manual checking of theexecution output. For evaluation, we conducted large-scale mutation on 36,295real-world smart contracts and generated 253,153 smart contracts. Among them,66.2% showed differential performance, including 1,596 variant contractstriggered inconsistent output among EVMs. Accompanied by manual root causeanalysis, we found 5 previously unknown security bugs in four widely used EVMs,and all had been included in Common Vulnerabilities and Exposures (CVE)database.

EVMFuzz: Differential Fuzz Testing of Ethereum Virtual Machine